The codebase uses epoch seconds, but is not clear whether that is UTC or browser-local seconds. Fix this to UTC with browser-shifting.